StackRadar

CVE-2026-26014

Medium

Advisory

Published 11 Feb 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
73
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
1 of 2
affected packages

Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key

Carried by container images the latest versions of 73 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
github.com/pion/dtls/v2golangv2.0.9, v2.0.13, v2.1.0, v2.1.5+6 moreno fix listed46
github.com/pion/dtls/v3golangv3.0.4, v3.0.6, v3.0.7, v3.0.9+2 more3.0.11, 3.1.122
OSV records
GHSA-9f3f-wv7r-qc8r
Also known as
GO-2026-4479

Charts affected

73 by stars
ChartLatestAffected imagesRadar Score
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/pion/dtls/v2@v2.2.12
github.com/pion/dtls/v3@v3.0.6
no fix listed
3.0.11

Open the chart page →

579
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/pion/dtls/v2@v2.2.12
github.com/pion/dtls/v3@v3.0.6
no fix listed
3.0.11

Open the chart page →

579
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/pion/dtls/v2@v2.2.12
github.com/pion/dtls/v3@v3.0.6
no fix listed
3.0.11

Open the chart page →

579
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
github.com/pion/dtls/v2@v2.2.12
github.com/pion/dtls/v3@v3.0.6
no fix listed
3.0.11

Open the chart page →

579
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste4cda693ed63
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

1,604
rtsp-to-webgeek-cookbookVerified publisher2.2.21 of 1See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
github.com/pion/dtls/v2@v2.1.0
no fix listed

Open the chart page →

1,467
torrservergeek-cookbookVerified publisher1.2.21 of 1See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
smailkoz/torrserver:1.0.1117b52d15de8f0
github.com/pion/dtls/v2@v2.0.13
no fix listed

Open the chart page →

3,165
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

2,868
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
github.com/pion/dtls/v3@v3.0.4
3.0.11

Open the chart page →

1,480
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
github.com/pion/dtls/v2@v2.2.8
no fix listed

Open the chart page →

10,716
livekit-serverlivekit-server1.9.01 of 1See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.9.03602a85840d5
github.com/pion/dtls/v3@v3.0.6
3.0.11

Open the chart page →

1,552
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
github.com/pion/dtls/v3@v3.0.10
3.0.11

Open the chart page →

2,444
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/pion/dtls/v2@v2.0.9
no fix listed

Open the chart page →

3,764
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/pion/dtls/v2@v2.2.7
no fix listed

Open the chart page →

5,565
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/pion/dtls/v2@v2.0.9
no fix listed

Open the chart page →

9,558
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
github.com/pion/dtls/v3@v3.0.7
3.0.11

Open the chart page →

4,749
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/pion/dtls/v2@v2.2.7
no fix listed

Open the chart page →

7,062
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
github.com/pion/dtls/v2@v2.1.5
no fix listed

Open the chart page →

5,582
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

2,938
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

1,239
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

6,779
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

1,239
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-26014.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
github.com/pion/dtls/v2@v2.2.12
no fix listed

Open the chart page →

1,426

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
github.com/pion/dtls/v2@v2.1.0
no fix listed
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
github.com/pion/dtls/v2@v2.2.12
github.com/pion/dtls/v3@v3.0.6
no fix listed
3.0.11
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
github.com/pion/dtls/v3@v3.0.10
3.0.11
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
github.com/pion/dtls/v3@v3.0.10
3.0.11
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
github.com/pion/dtls/v3@v3.0.7
3.0.11
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
github.com/pion/dtls/v3@v3.0.10
3.0.11
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/pion/dtls/v2@v2.2.7
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/pion/dtls/v2@v2.2.7
no fix listed
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/pion/dtls/v2@v2.2.9
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.